Malicious code in test-mlw2-snare-basil (npm)

The package test-mlw2-snare-basil was found to contain malicious code...

Malicious code in basil-6o1p6-cnqek-sky-project (npm)

The package basil-6o1p6-cnqek-sky-project was found to contain malicious code...

MAL-2025-24082 Malicious code in juniper-qkovo-376h4-basil-project (npm)

The package juniper-qkovo-376h4-basil-project was found to contain malicious code...

MAL-2025-31198 Malicious code in quasar-xreep-cvuv1-basil-project (npm)

The package quasar-xreep-cvuv1-basil-project was found to contain malicious code...

Malicious code in basil-bot-2k4 (npm)

The package basil-bot-2k4 was found to contain malicious code...

MAL-2025-38203 Malicious code in velvet-9wxz0-n95vj-basil-project (npm)

The package velvet-9wxz0-n95vj-basil-project was found to contain malicious code...

MAL-2025-15508 Malicious code in basil-6o1p6-cnqek-sky-project (npm)

The package basil-6o1p6-cnqek-sky-project was found to contain malicious code...

CVE-2024-39310

The Basil recipe theme for WordPress is vulnerable to Persistent Cross-Site Scripting XSS via the posttitle parameter in versions up to, and including, 2.0.4 due to insufficient input sanitization and output escaping. This vulnerability allows authenticated attackers with contributor-level access...

WordPress Basil theme <= 2.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Unknown in WordPress Theme Basil versions = 2.0.4...

WordPress Basil Theme <= 2.0.4 is vulnerable to Cross Site Scripting (XSS)

Software Basil Type Theme Vulnerable versions = 2.0.4 Fixed in 2.0.5 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-39310 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 604f7a92c550 Credits Unknown Required privilege...

CVE-2024-39310 WordPress Basil Theme Authenticated (Contributor+) Persistent Cross-Site Scripting Vulnerability

The Basil recipe theme for WordPress is vulnerable to Persistent Cross-Site Scripting XSS via the posttitle parameter in versions up to, and including, 2.0.4 due to insufficient input sanitization and output escaping. This vulnerability allows authenticated attackers with contributor-level access...

CVE-2024-39310

The CVE-2024-39310 involves the Basil recipe theme for WordPress. Affected versions are

CVE-2024-39310 WordPress Basil Theme Authenticated (Contributor+) Persistent Cross-Site Scripting Vulnerability

The Basil recipe theme for WordPress is vulnerable to Persistent Cross-Site Scripting XSS via the posttitle parameter in versions up to, and including, 2.0.4 due to insufficient input sanitization and output escaping. This vulnerability allows authenticated attackers with contributor-level access...

CVE-2024-39310 WordPress Basil Theme Authenticated (Contributor+) Persistent Cross-Site Scripting Vulnerability

The Basil recipe theme for WordPress is vulnerable to Persistent Cross-Site Scripting XSS via the posttitle parameter in versions up to, and including, 2.0.4 due to insufficient input sanitization and output escaping. This vulnerability allows authenticated attackers with contributor-level access...

CVE-2024-39310: Improper Neutralization of Input During Web Page Generation

The Basil recipe theme for WordPress is vulnerable to Persistent Cross-Site Scripting XSS via the posttitle parameter in versions up to, and including, 2.0.4 due to insufficient input sanitization and output escaping. This vulnerability allows authenticated attackers with contributor-level access...

PT-2024-28436 · WordPress · Basil +1

Name of the Vulnerable Software and Affected Versions: The Basil recipe theme for WordPress versions up to, and including, 2.0.4 Description: The issue is related to Persistent Cross-Site Scripting XSS via the post title parameter due to insufficient input sanitization and output escaping. This...

WordPress plugin Basil recipe security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

Server side request forgery (ssrf)

Server-Side Request Forgery SSRF vulnerability in Montonio Montonio for WooCommerce, Wpopal Wpopal Core Features, AMO for WP – Membership Management ArcStone wp-amo, Long Watch Studio WooVirtualWallet – A virtual wallet for WooCommerce, Long Watch Studio WooVIP – Membership plugin for WordPress a...

CVE-2022-40700 Server Side Request Forgery (SSRF) vulnerability affecting multiple WordPress plugins

Server-Side Request Forgery SSRF vulnerability in Montonio Montonio for WooCommerce, Wpopal Wpopal Core Features, AMO for WP – Membership Management ArcStone wp-amo, Long Watch Studio WooVirtualWallet – A virtual wallet for WooCommerce, Long Watch Studio WooVIP – Membership plugin for WordPress a...